Boletines de Vulnerabilidades

CVE-2022-28134

   
Software afectado BITBUCKET
 
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2022-28134